473,796 Members | 2,911 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

Using aspnet Impersonation, ASPNET_SETREG, applicaton throws buffer overflow.

jay
I am attempting to impersonate an account in ASPNET. I am using
aspnet_setreg to store the username and passwords. I have given the
ASPNET account permisision to read the registry values. However, the
application throws:

"Could not create Windows user token from the credentials specified in
the config file. Error from the operating system 'A required privilege
is not held by the client'."

This occurs even when the ASPNET account has TCB privileges.

When moitoring the registry with regmon I see the following:

67 3.69724321 aspnet_wp.exe:2 212 OpenKey HKLM\SOFTWARE\F ortyTwo\Extra\A SPNET_SETREG SUCCESS Access:
0x20019
68 3.69729805 aspnet_wp.exe:2 212 QueryValue HKLM\SOFTWARE\F ortyTwo\Extra\A SPNET_SETREG\se cond BUFFER
OVERFLOW
69 3.69735813 aspnet_wp.exe:2 212 QueryValue HKLM\SOFTWARE\F ortyTwo\Extra\A SPNET_SETREG\se cond SUCCESS 01
00 00 00 D0 8C 9D DF ...
70 3.69899845 aspnet_wp.exe:2 212 CloseKey HKLM\SOFTWARE\F ortyTwo\Extra\A SPNET_SETREG SUCCESS
71 3.69913554 aspnet_wp.exe:2 212 OpenKey HKLM\SOFTWARE\F ortyTwo\Extra\A SPNET_SETREG SUCCESS Access:
0x20019
72 3.69917965 aspnet_wp.exe:2 212 QueryValue HKLM\SOFTWARE\F ortyTwo\Extra\A SPNET_SETREG\fi rst BUFFER
OVERFLOW
73 3.69923687 aspnet_wp.exe:2 212 QueryValue HKLM\SOFTWARE\F ortyTwo\Extra\A SPNET_SETREG\fi rst SUCCESS 01
00 00 00 D0 8C 9D DF ...
74 3.70052648 aspnet_wp.exe:2 212 CloseKey HKLM\SOFTWARE\F ortyTwo\Extra\A SPNET_SETREG SUCCESS
75 3.71294332 aspnet_wp.exe:2 212 OpenKey HKLM\SOFTWARE\F ortyTwo\Extra\A SPNET_SETREG SUCCESS Access:
0x20019
76 3.71299791 aspnet_wp.exe:2 212 QueryValue HKLM\SOFTWARE\F ortyTwo\Extra\A SPNET_SETREG\se cond BUFFER
OVERFLOW
77 3.71305823 aspnet_wp.exe:2 212 QueryValue HKLM\SOFTWARE\F ortyTwo\Extra\A SPNET_SETREG\se cond SUCCESS 01
00 00 00 D0 8C 9D DF ...
78 3.71464062 aspnet_wp.exe:2 212 CloseKey HKLM\SOFTWARE\F ortyTwo\Extra\A SPNET_SETREG SUCCESS
79 3.71477723 aspnet_wp.exe:2 212 OpenKey HKLM\SOFTWARE\F ortyTwo\Extra\A SPNET_SETREG SUCCESS Access:
0x20019
80 3.71482134 aspnet_wp.exe:2 212 QueryValue HKLM\SOFTWARE\F ortyTwo\Extra\A SPNET_SETREG\fi rst BUFFER
OVERFLOW
81 3.71487856 aspnet_wp.exe:2 212 QueryValue HKLM\SOFTWARE\F ortyTwo\Extra\A SPNET_SETREG\fi rst SUCCESS 01
00 00 00 D0 8C 9D DF ...
82 3.71617508 aspnet_wp.exe:2 212 CloseKey HKLM\SOFTWARE\F ortyTwo\Extra\A SPNET_SETREG SUCCESS
I'm not sure what's causing the buffer overflow.

Other info: Server 2000, .NET Framework v1.1.4322

Thanks for your input. :)

-Jay

Nov 19 '05 #1
2 1955
if you are on win200, then the asp.net account needs "act as part of the os"
permission. this is the permission that allows impersonation.

--bruce (sqlworkcom)

<ja*@gloryfish. org> wrote in message
news:11******** *************@g 43g2000cwa.goog legroups.com...
I am attempting to impersonate an account in ASPNET. I am using
aspnet_setreg to store the username and passwords. I have given the
ASPNET account permisision to read the registry values. However, the
application throws:

"Could not create Windows user token from the credentials specified in
the config file. Error from the operating system 'A required privilege
is not held by the client'."

This occurs even when the ASPNET account has TCB privileges.

When moitoring the registry with regmon I see the following:

67 3.69724321 aspnet_wp.exe:2 212 OpenKey
HKLM\SOFTWARE\F ortyTwo\Extra\A SPNET_SETREG SUCCESS Access:
0x20019
68 3.69729805 aspnet_wp.exe:2 212 QueryValue
HKLM\SOFTWARE\F ortyTwo\Extra\A SPNET_SETREG\se cond BUFFER
OVERFLOW
69 3.69735813 aspnet_wp.exe:2 212 QueryValue
HKLM\SOFTWARE\F ortyTwo\Extra\A SPNET_SETREG\se cond SUCCESS 01
00 00 00 D0 8C 9D DF ...
70 3.69899845 aspnet_wp.exe:2 212 CloseKey
HKLM\SOFTWARE\F ortyTwo\Extra\A SPNET_SETREG SUCCESS
71 3.69913554 aspnet_wp.exe:2 212 OpenKey
HKLM\SOFTWARE\F ortyTwo\Extra\A SPNET_SETREG SUCCESS Access:
0x20019
72 3.69917965 aspnet_wp.exe:2 212 QueryValue
HKLM\SOFTWARE\F ortyTwo\Extra\A SPNET_SETREG\fi rst BUFFER
OVERFLOW
73 3.69923687 aspnet_wp.exe:2 212 QueryValue
HKLM\SOFTWARE\F ortyTwo\Extra\A SPNET_SETREG\fi rst SUCCESS 01
00 00 00 D0 8C 9D DF ...
74 3.70052648 aspnet_wp.exe:2 212 CloseKey
HKLM\SOFTWARE\F ortyTwo\Extra\A SPNET_SETREG SUCCESS
75 3.71294332 aspnet_wp.exe:2 212 OpenKey
HKLM\SOFTWARE\F ortyTwo\Extra\A SPNET_SETREG SUCCESS Access:
0x20019
76 3.71299791 aspnet_wp.exe:2 212 QueryValue
HKLM\SOFTWARE\F ortyTwo\Extra\A SPNET_SETREG\se cond BUFFER
OVERFLOW
77 3.71305823 aspnet_wp.exe:2 212 QueryValue
HKLM\SOFTWARE\F ortyTwo\Extra\A SPNET_SETREG\se cond SUCCESS 01
00 00 00 D0 8C 9D DF ...
78 3.71464062 aspnet_wp.exe:2 212 CloseKey
HKLM\SOFTWARE\F ortyTwo\Extra\A SPNET_SETREG SUCCESS
79 3.71477723 aspnet_wp.exe:2 212 OpenKey
HKLM\SOFTWARE\F ortyTwo\Extra\A SPNET_SETREG SUCCESS Access:
0x20019
80 3.71482134 aspnet_wp.exe:2 212 QueryValue
HKLM\SOFTWARE\F ortyTwo\Extra\A SPNET_SETREG\fi rst BUFFER
OVERFLOW
81 3.71487856 aspnet_wp.exe:2 212 QueryValue
HKLM\SOFTWARE\F ortyTwo\Extra\A SPNET_SETREG\fi rst SUCCESS 01
00 00 00 D0 8C 9D DF ...
82 3.71617508 aspnet_wp.exe:2 212 CloseKey
HKLM\SOFTWARE\F ortyTwo\Extra\A SPNET_SETREG SUCCESS
I'm not sure what's causing the buffer overflow.

Other info: Server 2000, .NET Framework v1.1.4322

Thanks for your input. :)

-Jay

Nov 19 '05 #2
That's what I said. I get this error and the buffer overflow even when
the ASPNET account has TCB (Trusted Computing Base, "Act as part
of...") privileges.

Nov 19 '05 #3

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

0
1412
by: RichW | last post by:
We are having some problems with invalid characters in passwords when using aspnet_setreg. Aspnet_setreg seems to generate the registry keys successfully, but then the asp.net application using the username/password encrypted with aspnet_setreg won't start properly because of a problem with the password. For information, we have a utility that generates strong passwords for us. The passwords could contain most of the special...
9
10906
by: Ben Dewey | last post by:
Project: ---------------------------- I am creating a HTTPS File Transfer App using ASP.NET and C#. I am utilizing ActiveDirectory and windows security to manage the permissions. Why reinvent the wheel, right? Everything so far is working well with the Active Directory. The problem I am having is with adding File Permissions to a directory. I am currently using some code courtesy of "Willy Denoyette "
6
1982
by: Marina | last post by:
Hi, I would like to give the ASPNET process that is running on my machine permission to connect to a sql server database that is on another machine. When I try to do this it says: 'Windows NT user or user group 'mymachinename\ASPNET not found'. This all works however, if the databse server is my local machine. So the question then becomes, how can I give this user privileges to connect to this remote database server?
3
2027
by: Richard Chandler | last post by:
We're having a problem with ASP.NET security and running on a Win2k Domain Controller. We can't set up the access rights to the registry for ASPNET as the user doesn't exist, this access is required so that the process can obtain the credentials from the registry (as stamped with aspnet_setreg.exe) and impersonate the required network user. Has anyone else got around this problem, other than not installing the website on a domain...
1
1439
by: Sivaraman.S | last post by:
I am unable to create new users using directory services in Windows 2003 server. But it is possible to create users with ASP.NET applications in windows 2000. I am getting "Permission Denied" and the "General access denied error " error. Can you please some code samples or solution for the problem.
6
2085
by: darrel | last post by:
I'm struggling with an odd permissions problem I have with one of my functions. It takes a file, writes a directory, and then uploads some files to it. This works. Once. Any subsequent attempt and writing new files to the created directory results in an access denied error. Thanks to a script by Keith Brown, I was able to determine who my application was running as: > ====================================================== >
0
917
by: =?Utf-8?B?U2FuZHBvaW50R3V5?= | last post by:
(reference the post yesterday with the same first few words in subject) Peter was right, *something* had changed. An update had pushed a patch to the desktops for Proventia (was Blackice?) that is seeing vs.net as causing (from its log) "Buffer Overflow Exploit] Buffer overflow exploit attempt detected" and is blocking it. Arrggghhh.
7
2834
by: =?Utf-8?B?QU9UWCBTYW4gQW50b25pbw==?= | last post by:
Hi, I have been using the code (some of it has been removed for simplicity) below to allow authenticated (using ASP.NET membership database) users to get a file from their archive area. It seems to work fine, however I noticed that no web log entry is added when a successful download occurs (normally a 200 HTTP status code, however, if there is an authorization failure, it gets logged). I have a logging routine that logs a successful...
13
4018
by: =?Utf-8?B?Um9nZXIgTWFydGlu?= | last post by:
This is a follow-up to my post "Silverlight video doesn't work when file is streamed from handler in ASP.net" at http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=microsoft.public.dotnet.framework.aspnet&mid=e9a38d03-83a8-41fc-8950-5ee60d2a18a5. I have a web site under .NET 2.0 that renders videos using the Silverlight media player. When I stream the video file (.wmv) to the browser via a hard-coded link to the file,...
0
9685
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...
0
10467
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
1
10201
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
0
10021
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
0
9061
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...
0
6802
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
0
5454
by: TSSRALBI | last post by:
Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
0
5582
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
2
3744
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.